Fix Gitea CI/CD deployment

.gitea/workflows/deploy.yaml

@@ -1,186 +1,272 @@
 name: CI/CD Pipeline to Rancher - SIDATA
 
 on:
-push:
-branches:
-- main
+  push:
+    branches:
+      - main
 
 jobs:
-build-and-deploy:
-runs-on: ubuntu-latest
+  build-and-deploy:
+    runs-on: ubuntu-latest
 
-env:
-  HTTP_PROXY: http://10.15.3.20:80
-  HTTPS_PROXY: http://10.15.3.20:80
-  http_proxy: http://10.15.3.20:80
-  https_proxy: http://10.15.3.20:80
+    env:
+      # ============================================================
+      # Proxy
+      # ============================================================
+      HTTP_PROXY: http://10.15.3.20:80
+      HTTPS_PROXY: http://10.15.3.20:80
+      http_proxy: http://10.15.3.20:80
+      https_proxy: http://10.15.3.20:80
 
-  NO_PROXY: localhost,127.0.0.1,10.81.2.10,10.15.39.186,registry-nexus-bpkd.drc-bpkd.data-center.id,registry-bpkd.drc-bpkd.data-center.id,.drc-bpkd.data-center.id,.bpkd.jakarta.go.id
+      # ============================================================
+      # Internal network - bypass proxy
+      # ============================================================
+      NO_PROXY: localhost,127.0.0.1,10.81.2.10,10.15.39.186,registry-nexus-bpkd.drc-bpkd.data-center.id,registry-bpkd.drc-bpkd.data-center.id,.drc-bpkd.data-center.id,.bpkd.jakarta.go.id
+      no_proxy: localhost,127.0.0.1,10.81.2.10,10.15.39.186,registry-nexus-bpkd.drc-bpkd.data-center.id,registry-bpkd.drc-bpkd.data-center.id,.drc-bpkd.data-center.id,.bpkd.jakarta.go.id
 
-  no_proxy: localhost,127.0.0.1,10.81.2.10,10.15.39.186,registry-nexus-bpkd.drc-bpkd.data-center.id,registry-bpkd.drc-bpkd.data-center.id,.drc-bpkd.data-center.id,.bpkd.jakarta.go.id
+    steps:
 
-steps:
+      # ============================================================
+      # 1. Check workspace
+      # ============================================================
+      - name: Check Workspace
+        shell: bash
+        run: |
+          set -e
 
-  # ============================================================
-  # 1. Build Docker Image
-  # ============================================================
-  - name: Build Docker Image
-    shell: bash
-    run: |
-      set -e
+          echo "=========================================="
+          echo "WORKSPACE"
+          echo "=========================================="
 
-      echo "=========================================="
-      echo "BUILD SIDATA"
-      echo "=========================================="
+          pwd
+          ls -lah
 
-      docker build \
-        --build-arg http_proxy="$HTTP_PROXY" \
-        --build-arg https_proxy="$HTTPS_PROXY" \
-        --build-arg HTTP_PROXY="$HTTP_PROXY" \
-        --build-arg HTTPS_PROXY="$HTTPS_PROXY" \
-        --build-arg no_proxy="$NO_PROXY" \
-        --build-arg NO_PROXY="$NO_PROXY" \
-        -t sidata:latest .
+          echo ""
+          echo "Git:"
+          git --version || true
 
-  # ============================================================
-  # 2. Login Nexus / Container Registry
-  # ============================================================
-  - name: Login Container Registry
-    shell: bash
-    run: |
-      set -e
+          echo ""
+          echo "Docker:"
+          docker --version || true
 
-      echo "=========================================="
-      echo "LOGIN REGISTRY"
-      echo "=========================================="
+          echo ""
+          echo "Podman:"
+          podman --version || true
 
-      echo "${{ secrets.REGISTRY_PASSWORD }}" | \
-        docker login registry-bpkd.drc-bpkd.data-center.id \
-          -u "${{ secrets.REGISTRY_USER }}" \
-          --password-stdin
+      # ============================================================
+      # 2. Check Nexus Base Image
+      # ============================================================
+      - name: Check Nexus Base Image
+        shell: bash
+        run: |
+          set -e
 
-  # ============================================================
-  # 3. Tag Image
-  # ============================================================
-  - name: Tag Docker Image
-    shell: bash
-    run: |
-      set -e
+          BASE_IMAGE="registry-nexus-bpkd.drc-bpkd.data-center.id/php74-fpm-oci8-lengkap:1.0"
 
-      IMAGE="registry-bpkd.drc-bpkd.data-center.id/${{ secrets.REGISTRY_USER }}/sidata"
+          echo "=========================================="
+          echo "CHECK NEXUS"
+          echo "=========================================="
 
-      docker tag sidata:latest "${IMAGE}:latest"
-      docker tag sidata:latest "${IMAGE}:${GITHUB_SHA:-latest}"
+          echo "Testing registry..."
 
-      echo "Images:"
-      docker images | grep sidata
+          HTTPS_PROXY= \
+          HTTP_PROXY= \
+          https_proxy= \
+          http_proxy= \
+          NO_PROXY="registry-nexus-bpkd.drc-bpkd.data-center.id,10.81.2.10" \
+          no_proxy="registry-nexus-bpkd.drc-bpkd.data-center.id,10.81.2.10" \
+          curl -kfsS \
+            --connect-timeout 10 \
+            https://registry-nexus-bpkd.drc-bpkd.data-center.id/v2/
 
-  # ============================================================
-  # 4. Push Image
-  # ============================================================
-  - name: Push Docker Image
-    shell: bash
-    run: |
-      set -e
+          echo ""
+          echo "Nexus registry OK."
 
-      IMAGE="registry-bpkd.drc-bpkd.data-center.id/${{ secrets.REGISTRY_USER }}/sidata"
+          echo ""
+          echo "Base image:"
+          echo "$BASE_IMAGE"
 
-      echo "=========================================="
-      echo "PUSH IMAGE"
-      echo "=========================================="
+      # ============================================================
+      # 3. Login Container Registry
+      # ============================================================
+      - name: Login Container Registry
+        shell: bash
+        run: |
+          set -e
 
-      docker push "${IMAGE}:latest"
-      docker push "${IMAGE}:${GITHUB_SHA:-latest}"
+          echo "=========================================="
+          echo "LOGIN REGISTRY"
+          echo "=========================================="
 
-  # ============================================================
-  # 5. Install kubectl
-  # ============================================================
-  - name: Install kubectl
-    shell: bash
-    run: |
-      set -e
+          echo "${{ secrets.REGISTRY_PASSWORD }}" | \
+            docker login \
+              registry-bpkd.drc-bpkd.data-center.id \
+              --username "${{ secrets.REGISTRY_USER }}" \
+              --password-stdin
 
-      echo "=========================================="
-      echo "INSTALL KUBECTL"
-      echo "=========================================="
+      # ============================================================
+      # 4. Build Image
+      # ============================================================
+      - name: Build Docker Image
+        shell: bash
+        run: |
+          set -e
 
-      KUBECTL_VERSION=$(curl -L -s https://dl.k8s.io/release/stable.txt)
+          echo "=========================================="
+          echo "BUILD SIDATA"
+          echo "=========================================="
 
-      curl -fL \
-        "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl" \
-        -o kubectl
+          docker build \
+            --build-arg http_proxy="$HTTP_PROXY" \
+            --build-arg https_proxy="$HTTPS_PROXY" \
+            --build-arg HTTP_PROXY="$HTTP_PROXY" \
+            --build-arg HTTPS_PROXY="$HTTPS_PROXY" \
+            --build-arg no_proxy="$NO_PROXY" \
+            --build-arg NO_PROXY="$NO_PROXY" \
+            -t sidata:latest .
 
-      chmod +x kubectl
+          echo ""
+          echo "BUILD SUCCESS"
 
-      ./kubectl version --client
+          docker images | grep sidata
 
-  # ============================================================
-  # 6. Configure Rancher
-  # ============================================================
-  - name: Configure Rancher
-    shell: bash
-    run: |
-      set -e
+      # ============================================================
+      # 5. Tag Image
+      # ============================================================
+      - name: Tag Docker Image
+        shell: bash
+        run: |
+          set -e
 
-      echo "=========================================="
-      echo "CONFIGURE RANCHER"
-      echo "=========================================="
+          IMAGE="registry-bpkd.drc-bpkd.data-center.id/${{ secrets.REGISTRY_USER }}/sidata"
+          TAG="${{ gitea.sha }}"
 
-      ./kubectl config set-cluster rancher-cluster \
-        --server="${{ secrets.RANCHER_URL }}/k8s/clusters/${{ secrets.RANCHER_CLUSTER_ID }}" \
-        --insecure-skip-tls-verify=true
+          echo "=========================================="
+          echo "TAG IMAGE"
+          echo "=========================================="
 
-      ./kubectl config set-credentials rancher-user \
-        --token="${{ secrets.RANCHER_TOKEN }}"
+          docker tag sidata:latest "${IMAGE}:latest"
+          docker tag sidata:latest "${IMAGE}:${TAG}"
 
-      ./kubectl config set-context rancher-context \
-        --cluster=rancher-cluster \
-        --user=rancher-user
+          docker images | grep sidata
 
-      ./kubectl config use-context rancher-context
+      # ============================================================
+      # 6. Push Image
+      # ============================================================
+      - name: Push Docker Image
+        shell: bash
+        run: |
+          set -e
 
-  # ============================================================
-  # 7. Test Rancher
-  # ============================================================
-  - name: Test Rancher Connection
-    shell: bash
-    run: |
-      set -e
+          IMAGE="registry-bpkd.drc-bpkd.data-center.id/${{ secrets.REGISTRY_USER }}/sidata"
+          TAG="${{ gitea.sha }}"
 
-      echo "=========================================="
-      echo "RANCHER CONNECTION"
-      echo "=========================================="
+          echo "=========================================="
+          echo "PUSH IMAGE"
+          echo "=========================================="
 
-      ./kubectl cluster-info
-      ./kubectl get nodes
+          docker push "${IMAGE}:latest"
+          docker push "${IMAGE}:${TAG}"
 
-  # ============================================================
-  # 8. Deploy Kubernetes
-  # ============================================================
-  - name: Deploy to Rancher
-    shell: bash
-    run: |
-      set -e
+          echo ""
+          echo "PUSH SUCCESS"
 
-      echo "=========================================="
-      echo "DEPLOY SIDATA"
-      echo "=========================================="
+      # ============================================================
+      # 7. Install kubectl
+      # ============================================================
+      - name: Install kubectl
+        shell: bash
+        run: |
+          set -e
 
-      if [ -d "k8s" ]; then
-        ./kubectl apply -f k8s/
-      elif [ -f "deploy.yaml" ]; then
-        ./kubectl apply -f deploy.yaml
-      elif [ -f "deployment.yaml" ]; then
-        ./kubectl apply -f deployment.yaml
-      else
-        echo "ERROR: Manifest Kubernetes tidak ditemukan."
-        exit 1
-      fi
+          echo "=========================================="
+          echo "INSTALL KUBECTL"
+          echo "=========================================="
 
-      echo ""
-      echo "=========================================="
-      echo "STATUS"
-      echo "=========================================="
+          KUBECTL_VERSION=$(curl -L -s \
+            --connect-timeout 10 \
+            https://dl.k8s.io/release/stable.txt)
 
-      ./kubectl get deployments -A
-      ./kubectl get pods -A
+          echo "Version: ${KUBECTL_VERSION}"
+
+          curl -fL \
+            --connect-timeout 10 \
+            "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl" \
+            -o kubectl
+
+          chmod +x kubectl
+
+          ./kubectl version --client
+
+      # ============================================================
+      # 8. Configure Rancher
+      # ============================================================
+      - name: Configure Rancher
+        shell: bash
+        run: |
+          set -e
+
+          echo "=========================================="
+          echo "CONFIGURE RANCHER"
+          echo "=========================================="
+
+          ./kubectl config set-cluster rancher-cluster \
+            --server="${{ secrets.RANCHER_URL }}/k8s/clusters/${{ secrets.RANCHER_CLUSTER_ID }}" \
+            --insecure-skip-tls-verify=true
+
+          ./kubectl config set-credentials rancher-user \
+            --token="${{ secrets.RANCHER_TOKEN }}"
+
+          ./kubectl config set-context rancher-context \
+            --cluster=rancher-cluster \
+            --user=rancher-user
+
+          ./kubectl config use-context rancher-context
+
+      # ============================================================
+      # 9. Test Rancher
+      # ============================================================
+      - name: Test Rancher Connection
+        shell: bash
+        run: |
+          set -e
+
+          echo "=========================================="
+          echo "RANCHER CONNECTION"
+          echo "=========================================="
+
+          ./kubectl cluster-info
+
+          echo ""
+          ./kubectl get nodes
+
+      # ============================================================
+      # 10. Deploy Kubernetes
+      # ============================================================
+      - name: Deploy to Rancher
+        shell: bash
+        run: |
+          set -e
+
+          echo "=========================================="
+          echo "DEPLOY SIDATA"
+          echo "=========================================="
+
+          if [ -d "k8s" ]; then
+            ./kubectl apply -f k8s/
+          elif [ -f "deploy.yaml" ]; then
+            ./kubectl apply -f deploy.yaml
+          else
+            echo "ERROR: deploy.yaml atau folder k8s tidak ditemukan."
+            exit 1
+          fi
+
+          echo ""
+          echo "=========================================="
+          echo "STATUS"
+          echo "=========================================="
+
+          ./kubectl get deployment -A
+          ./kubectl get pods -A
+          ./kubectl get service -A
+          ./kubectl get ingress -A

Dockerfile

@@ -1,28 +1,31 @@
 FROM registry-nexus-bpkd.drc-bpkd.data-center.id/php74-fpm-oci8-lengkap:1.0
 
+# =========================================================
+# Build arguments & Environment variables
+# =========================================================
 ARG http_proxy
 ARG https_proxy
+ARG no_proxy
 ARG HTTP_PROXY
 ARG HTTPS_PROXY
-ARG no_proxy
 ARG NO_PROXY
 
-ENV http_proxy=${http_proxy}
-ENV https_proxy=${https_proxy}
-ENV HTTP_PROXY=${HTTP_PROXY}
-ENV HTTPS_PROXY=${HTTPS_PROXY}
-ENV no_proxy=${no_proxy}
-ENV NO_PROXY=${NO_PROXY}
+ENV http_proxy=${http_proxy} \
+    https_proxy=${https_proxy} \
+    no_proxy=${no_proxy} \
+    HTTP_PROXY=${HTTP_PROXY} \
+    HTTPS_PROXY=${HTTPS_PROXY} \
+    NO_PROXY=${NO_PROXY}
 
 # =========================================================
 # System dependencies
 # =========================================================
-
-RUN echo "deb [trusted=yes] http://10.15.39.186:8081/repository/debian-proxy/ bullseye main" > /etc/apt/sources.list \
-    && echo "deb [trusted=yes] http://10.15.39.186:8081/repository/debian-proxy/ bullseye-updates main" >> /etc/apt/sources.list \
-    && rm -rf /etc/apt/sources.list.d/* \
-    && apt-get update \
-    && apt-get install -y --no-install-recommends \
+RUN set -eux; \
+    echo "deb [trusted=yes] http://10.15.39.186:8081/repository/debian-proxy/ bullseye main" > /etc/apt/sources.list; \
+    echo "deb [trusted=yes] http://10.15.39.186:8081/repository/debian-proxy/ bullseye-updates main" >> /etc/apt/sources.list; \
+    rm -rf /etc/apt/sources.list.d/*; \
+    apt-get update; \
+    apt-get install -y --no-install-recommends \
         nginx \
         redis-server \
         procps \
@@ -35,69 +38,72 @@ RUN echo "deb [trusted=yes] http://10.15.39.186:8081/repository/debian-proxy/ bu
         libzip-dev \
         libaio1 \
         libaio-dev \
-        unzip \
-    && docker-php-ext-configure gd --with-freetype --with-jpeg \
-    && docker-php-ext-install gd pdo pdo_mysql zip \
-    && curl --noproxy "" -fsSL http://10.15.39.186:8081/repository/raw-assets/storage/app/uploads/redis-5.3.7.tgz -o /tmp/redis.tgz \
-    && pecl install /tmp/redis.tgz \
-    && docker-php-ext-enable redis \
-    && rm -f /tmp/redis.tgz \
-    && rm -rf /var/lib/apt/lists/
+        unzip; \
+    docker-php-ext-configure gd --with-freetype --with-jpeg; \
+    docker-php-ext-install gd pdo pdo_mysql zip; \
+    curl --noproxy "" -fsSL http://10.15.39.186:8081/repository/raw-assets/storage/app/uploads/redis-5.3.7.tgz -o /tmp/redis.tgz; \
+    pecl install /tmp/redis.tgz; \
+    docker-php-ext-enable redis; \
+    rm -f /tmp/redis.tgz; \
+    rm -rf /var/lib/apt/lists/*
 
 # =========================================================
 # Application
 # =========================================================
-
 WORKDIR /var/www/html
-
 COPY . /var/www/html
 
 # =========================================================
 # Laravel permissions
 # =========================================================
-
-RUN mkdir -p /var/www/html/storage /var/www/html/bootstrap/cache \
-    && chown -R www-data:www-data /var/www/html \
-    && chmod -R 775 /var/www/html/storage \
-    && chmod -R 775 /var/www/html/bootstrap/cache
+RUN set -eux; \
+    mkdir -p /var/www/html/storage /var/www/html/bootstrap/cache; \
+    chown -R www-data:www-data /var/www/html; \
+    chmod -R 775 /var/www/html/storage /var/www/html/bootstrap/cache
 
 # =========================================================
 # Nginx configuration
 # =========================================================
-
-RUN rm -f /etc/nginx/sites-enabled/default \
-    && rm -f /etc/nginx/sites-available/default \
-    && printf '%s\n' \
-    'server {' \
-    '    listen 80;' \
-    '    server_name _;' \
-    '    root /var/www/html/public;' \
-    '    index index.php index.html;' \
-    '' \
-    '    location / {' \
-    '        try_files $uri $uri/ /index.php?$query_string;' \
-    '    }' \
-    '' \
-    '    location ~ \.php$ {' \
-    '        try_files $uri =404;' \
-    '        include fastcgi_params;' \
-    '        fastcgi_pass 127.0.0.1:9000;' \
-    '        fastcgi_index index.php;' \
-    '        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;' \
-    '    }' \
-    '}' > /etc/nginx/sites-available/default \
-    && ln -s /etc/nginx/sites-available/default /etc/nginx/sites-enabled/default
+RUN set -eux; \
+    rm -f /etc/nginx/sites-enabled/default /etc/nginx/sites-available/default; \
+    printf '%s\n' \
+        'server {' \
+        '    listen 80;' \
+        '    server_name _;' \
+        '    root /var/www/html/public;' \
+        '    index index.php index.html;' \
+        '' \
+        '    location / {' \
+        '        try_files $uri $uri/ /index.php?$query_string;' \
+        '    }' \
+        '' \
+        '    location ~ \.php$ {' \
+        '        try_files $uri =404;' \
+        '        include fastcgi_params;' \
+        '        fastcgi_pass 127.0.0.1:9000;' \
+        '        fastcgi_index index.php;' \
+        '        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;' \
+        '        fastcgi_param HTTP_X_FORWARDED_PROTO $http_x_forwarded_proto;' \
+        '        fastcgi_param HTTP_X_FORWARDED_PREFIX /sidataprod;' \
+        '    }' \
+        '' \
+        '    location ~ /\.ht {' \
+        '        deny all;' \
+        '    }' \
+        '}' > /etc/nginx/sites-available/default; \
+    ln -s /etc/nginx/sites-available/default /etc/nginx/sites-enabled/default; \
+    mkdir -p /run/nginx
 
 # =========================================================
-# Nginx
+# Laravel URL & Environment Variables
 # =========================================================
+ENV APP_ENV=production \
+    APP_DEBUG=false \
+    APP_URL=https://dashboard-bpkd.drc-bpkd.data-center.id/sidataprod
 
-RUN mkdir -p /run/nginx
-
+# =========================================================
+# Expose & Startup
+# =========================================================
 EXPOSE 80
 
-# =========================================================
-# Startup
-# =========================================================
-
-CMD ["sh", "-c", "if [ -f /var/www/html/.env.example ] && [ ! -f /var/www/html/.env ]; then cp /var/www/html/.env.example /var/www/html/.env; fi; env | grep -E '^(APP_|DB_|MYSQL_|ORA_|REDIS_|MAIL_|SESSION_|SOA_)' > /var/www/html/.env 2>/dev/null || true; chown www-data:www-data /var/www/html/.env 2>/dev/null || true; redis-server --daemonize yes; php-fpm -D; exec nginx -g 'daemon off;'"]
+CMD ["sh", "-c", "set -e; if [ ! -f /var/www/html/.env ]; then if [ -f /var/www/html/.env.example ]; then cp /var/www/html/.env.example /var/www/html/.env; else touch /var/www/html/.env; fi; fi; tmp_env=$(mktemp); env | grep -E '^(APP_|DB_|MYSQL_|ORA_|REDIS_|MAIL_|SESSION_|SOA_)' > \"$tmp_env\" || true; if [ -s \"$tmp_env\" ]; then cat \"$tmp_env\" > /var/www/html/.env; fi; rm -f \"$tmp_env\"; chown www-data:www-data /var/www/html/.env; chmod 664 /var/www/html/.env; redis-server --daemonize yes; php-fpm -D; exec nginx -g 'daemon off;'"]